Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/8baa9c-0ef2-42fb-b3d6-5a95cc80cd1b/1/ptfcF1i_r5VAvGmj1J0WSYQNMFY.roa
File: ptfcF1i_r5VAvGmj1J0WSYQNMFY.roa (raw, json)
Hash identifier: 7TODrnk04kq/IF9J1nBz0SOVCGvrJ2oIyjuKFcptNdc=
Subject key identifier: A6:D7:DC:17:58:BF:AF:95:40:BC:69:A3:D4:9D:16:49:84:0D:30:56
Certificate issuer: /CN=b5afa37bd0ddadeb7fea2b9be64b1108e20de9b4
Certificate serial: 0185714C2A95E3C8259F7A109A57EC19353C
Authority key identifier: B5:AF:A3:7B:D0:DD:AD:EB:7F:EA:2B:9B:E6:4B:11:08:E2:0D:E9:B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ta-je9Ddret_6iub5ksRCOIN6bQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/8baa9c-0ef2-42fb-b3d6-5a95cc80cd1b/1/ptfcF1i_r5VAvGmj1J0WSYQNMFY.roa
Signing time: Mon 02 Jan 2023 07:04:55 +0000
ROA not before: Mon 02 Jan 2023 07:04:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 209030
IP address blocks: 82.202.187.0/24 maxlen: 24
82.202.191.0/24 maxlen: 24
82.202.190.0/24 maxlen: 24
82.202.189.0/24 maxlen: 24
82.202.188.0/24 maxlen: 24
82.202.186.0/24 maxlen: 24
2a13:c80::/32 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:4c:2a:95:e3:c8:25:9f:7a:10:9a:57:ec:19:35:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b5afa37bd0ddadeb7fea2b9be64b1108e20de9b4
Validity
Not Before: Jan 2 07:04:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a6d7dc1758bfaf9540bc69a3d49d1649840d3056
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:d0:96:2d:62:be:c5:5c:5f:dc:d8:90:91:f4:
3c:8c:1b:08:9c:e9:91:d4:4c:dc:f2:02:f9:38:c4:
ca:3d:0b:58:35:61:19:51:c0:9a:a5:5e:18:1f:81:
f8:a7:7e:a6:b9:9c:35:4a:7d:34:a0:81:bc:42:ea:
6f:f3:d7:53:75:ba:f6:4d:b5:0a:cf:27:f8:b0:0e:
00:99:25:03:7c:eb:f3:4a:9b:ef:41:bf:15:59:82:
9e:2f:3a:0f:17:ec:28:b8:ae:dd:56:54:f1:dd:b7:
32:f8:c0:a5:a8:0e:3f:dc:5a:bf:5d:cd:10:d5:dd:
e7:49:e7:77:4c:d0:b6:a7:17:19:ef:35:62:1a:66:
6e:ca:36:2b:01:36:ee:43:17:77:fa:05:15:82:80:
78:de:fc:d3:a9:f7:b7:be:a3:e8:ac:d8:57:12:0f:
bf:be:c6:54:c5:52:a3:23:7b:6d:35:35:c0:1d:8d:
c2:cb:6a:9c:f4:dd:20:b4:8c:84:e2:66:9a:97:ee:
ba:b7:38:0c:7f:27:ab:f5:aa:2c:97:48:4e:c5:c3:
87:6e:2b:83:f0:cb:ff:65:4d:09:5a:97:a1:05:91:
c1:75:dd:d0:5f:ef:76:a5:f6:e0:2d:77:b8:db:8d:
c3:fd:61:11:82:78:89:b4:a3:7c:b2:36:a5:1a:74:
c3:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:D7:DC:17:58:BF:AF:95:40:BC:69:A3:D4:9D:16:49:84:0D:30:56
X509v3 Authority Key Identifier:
keyid:B5:AF:A3:7B:D0:DD:AD:EB:7F:EA:2B:9B:E6:4B:11:08:E2:0D:E9:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ta-je9Ddret_6iub5ksRCOIN6bQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/8baa9c-0ef2-42fb-b3d6-5a95cc80cd1b/1/ptfcF1i_r5VAvGmj1J0WSYQNMFY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/8baa9c-0ef2-42fb-b3d6-5a95cc80cd1b/1/ta-je9Ddret_6iub5ksRCOIN6bQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.202.186.0-82.202.191.255
IPv6:
2a13:c80::/32
Signature Algorithm: sha256WithRSAEncryption
34:07:0b:fd:3f:b8:f6:97:a4:d5:b1:1d:1f:b7:29:bb:0d:c3:
90:a6:95:ce:72:0f:ed:93:47:47:76:55:fa:88:a0:c8:b9:21:
80:69:e4:fe:53:39:b2:a6:c7:45:ea:c0:d5:a3:82:13:14:64:
06:e3:43:fe:36:7c:e5:c6:d1:e8:82:b4:b4:52:e7:11:de:9f:
9a:cb:f1:e9:87:59:6c:2f:c2:b9:ca:be:bd:b7:1a:b2:54:b1:
e2:a6:e2:f6:8c:98:ac:9d:4d:67:62:e4:53:58:b1:d0:76:57:
fc:00:51:95:15:a1:b3:c5:c0:04:b3:41:c7:da:80:c3:8e:a7:
49:e1:e4:e1:b4:61:c7:d7:dc:7c:ca:e0:8d:74:ad:32:a9:bc:
3b:aa:a0:d2:f4:96:c5:20:6b:71:58:5d:14:33:1a:2f:8f:90:
a8:58:0d:e7:27:7f:dd:79:8c:d0:ce:9b:f8:c7:b9:8e:ca:21:
59:4f:55:af:31:9e:34:4e:d1:2f:65:1d:aa:e4:1a:e4:e8:1d:
fb:d6:81:3a:f4:f9:af:11:0d:02:b6:c6:e9:76:34:01:51:d2:
ab:cc:9d:35:ff:08:89:32:46:5c:52:1a:6f:d2:8d:d0:12:b2:
a4:0c:38:59:c1:d1:06:09:ac:88:35:3d:68:79:1a:5b:02:b6:
c0:06:d3:d5
-----BEGIN CERTIFICATE-----
MIIFFDCCA/ygAwIBAgISAYVxTCqV48gln3oQmlfsGTU8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI1YWZhMzdiZDBkZGFkZWI3ZmVhMmI5YmU2NGIxMTA4ZTIw
ZGU5YjQwHhcNMjMwMTAyMDcwNDU1WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhNmQ3ZGMxNzU4YmZhZjk1NDBiYzY5YTNkNDlkMTY0OTg0MGQzMDU2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAutCWLWK+xVxf3NiQkfQ8jBsInOmR
1Ezc8gL5OMTKPQtYNWEZUcCapV4YH4H4p36muZw1Sn00oIG8Qupv89dTdbr2TbUK
zyf4sA4AmSUDfOvzSpvvQb8VWYKeLzoPF+wouK7dVlTx3bcy+MClqA4/3Fq/Xc0Q
1d3nSed3TNC2pxcZ7zViGmZuyjYrATbuQxd3+gUVgoB43vzTqfe3vqPorNhXEg+/
vsZUxVKjI3ttNTXAHY3Cy2qc9N0gtIyE4maal+66tzgMfyer9aosl0hOxcOHbiuD
8Mv/ZU0JWpehBZHBdd3QX+92pfbgLXe4243D/WERgniJtKN8sjalGnTDjQIDAQAB
o4ICIDCCAhwwHQYDVR0OBBYEFKbX3BdYv6+VQLxpo9SdFkmEDTBWMB8GA1UdIwQY
MBaAFLWvo3vQ3a3rf+orm+ZLEQjiDem0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdGEtamU5RGRyZXRfNml1YjVrc1JDT0lONmJRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOC84YmFhOWMtMGVmMi00MmZiLWIzZDYt
NWE5NWNjODBjZDFiLzEvcHRmY0YxaV9yNVZBdkdtajFKMFdTWVFOTUZZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hOC84YmFhOWMtMGVmMi00MmZiLWIzZDYtNWE5NWNjODBjZDFi
LzEvdGEtamU5RGRyZXRfNml1YjVrc1JDT0lONmJRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDYGCCsGAQUFBwEHAQH/BCcwJTAUBAIAATAOMAwDBAFSyroD
BAZSyoAwDQQCAAIwBwMFACoTDIAwDQYJKoZIhvcNAQELBQADggEBADQHC/0/uPaX
pNWxHR+3KbsNw5Cmlc5yD+2TR0d2VfqIoMi5IYBp5P5TObKmx0XqwNWjghMUZAbj
Q/42fOXG0eiCtLRS5xHen5rL8emHWWwvwrnKvr23GrJUseKm4vaMmKydTWdi5FNY
sdB2V/wAUZUVobPFwASzQcfagMOOp0nh5OG0YcfX3HzK4I10rTKpvDuqoNL0lsUg
a3FYXRQzGi+PkKhYDecnf915jNDOm/jHuY7KIVlPVa8xnjRO0S9lHarkGuToHfvW
gTr0+a8RDQK2xul2NAFR0qvMnTX/CIkyRlxSGm/SjdASsqQMOFnB0QYJrIg1PWh5
GlsCtsAG09U=
-----END CERTIFICATE-----
Generated at Mon Jan 1 21:19:42 2024 by rpki-client on console-ams.rpki-client.org